Is SCRIPT.INI a trojan horse?
It could be considered a trojan horse. In the case where a user sees someone sending them a script, and runs the script without examining it first to see what it does, SCRIPT.INI acts as a trojan horse. However, in the case of it being received with auto-DCC-get, it is not a trojan horse. 1.3 Are any other IRC clients vulnerable to SCRIPT.INI? SCRIPT.INI itself is in mIRC’s scripting language, so only mIRC is vulnerable to this particular script. However, this sort of exploit has been used for years against the Unix IrcII client (as well as a similar exploit that would allow an intruder to log in to your account without a password). Now that someone has had this amount of success in circulating a backdoored script, it could be expected that versions for other popular clients will soon appear. The directions below for prevention should be taken into consideration by all IRC users. [Return to top] 2. What if I have SCRIPT.INI? Quite simple: if you have it, delete it, and take steps to ma
